Security Affairs

SEPTEMBER 22, 2020

US Cybersecurity and Infrastructure Security Agency (CISA) is warning of a notable increase in the use of LokiBot malware by threat actors since July 2020. The Agency’s EINSTEIN Intrusion Detection System has detected persistent malicious activity associated with the LokiBot malware. ” reads the CISA’s advisory. .”

Malware 65

Malware Passwords Advertising Antivirus 65

Security Affairs

MARCH 24, 2020

ch launched the MalwareBazaar service, a malware repository to allow experts to share known malware samples and related info. ch launched a malware repository, called MalwareBazaar , to allow experts to share known malware samples and related analysis. Malware batches are available for download on a daily base.

Malware 52

Malware Adware Cyber threats Advertising 52

Security Affairs

DECEMBER 29, 2019

Experts uncovered a new tool dubbed BIOLOAD used by the FIN7 cybercrime group used as a dropper for a new variant of the Carbanak backdoor. The BIOLOAD loader shares similarities with BOOSTWRITE , another loader associated with the FIN7 group that is able to drop the malware directly in memory. SecurityAffairs – FIN7, malware).

Cybercrime 60

Cybercrime Antivirus Identity Theft Advertising 60

Security Affairs

OCTOBER 11, 2020

ransomware displays ransom note in innovative way Carnival confirms data breach as a result of the August ransomware attack Google enhances malware protection for accounts enrolled in Advanced Protection Program (APP) Russian Cybercrime group is exploiting Zerologon flaw, Microsoft warns.

Advertising 87

Advertising Antivirus Data privacy Ransomware 87

Security Affairs

MARCH 10, 2020

Microsoft is warning of human-operated ransomware, this kind of attack against businesses is becoming popular in the cybercrime ecosystem. Human-operated ransomware is a technique usually employed in nation-state attacks that is becoming very popular in the cybercrime ecosystem. ” reads the post published by Microsoft.

Ransomware 115

Ransomware Cybercrime Social Engineering Banking 115

SecureWorld News

APRIL 28, 2021

In January 2021, the FBI and other international law enforcement agencies worked together to take down one of the world's most notorious malware strains, Emotet. Emotet was one of the most dangerous malwares in the world, according to Europol. How many credentials were harvested by Emotet? What if my credentials were stolen by Emotet?

Banking 74

Banking Passwords Malware Password Management 74

Security Affairs

AUGUST 3, 2020

He had no previous criminal records at the time of the arrest, but it is known to be a member of a cybercrime forum to become an affiliate for the GandCrab ransomware operation. He allegedly subscribed the GandCrab ransomware-as-a-service to create his own version of the malware and spread it running a spam campaign.

Ransomware 117

Ransomware Advertising Malware Hacking 117

Security Affairs

SEPTEMBER 7, 2020

The Emotet banking trojan has been active at least since 2014, the botnet is operated by a threat actor tracked as TA542. In the middle-August, the Emotet malware was employed in fresh COVID19-themed spam campaign. Generally speaking, removal/cleaning by antivirus is not a sufficient guarantee. . Send the samples (.doc

Malware 111

Malware Advertising Antivirus Banking 111

Security Affairs

SEPTEMBER 20, 2019

Cofense researchers spotted a phishing campaign that is targeting taxpayers in the United States to infect them with the Amadey malware. Security experts at Cofense uncovered a phishing campaign that is targeting taxpayers in the United States attempting to infect them with a new piece of malware named Amadey.

Phishing 82

Phishing Social Engineering Malware Advertising 82

Security Affairs

NOVEMBER 5, 2020

In such attacks, malware places a spoofed malicious DLL file in a Windows’ WinSxS directory so that the operating system loads it instead of the legitimate file. The technique was already employed by other Chinese APT groups since 2013, later it was also adopted by other cybercrime gangs in attacks in the wild. Pierluigi Paganini.

Encryption 108

Encryption Malware Advertising Antivirus 108

Security Affairs

APRIL 14, 2019

The malware was developed to steal credentials, financial data, personal information, then the crooks offered them on the dark web marketplaces. The crooks used malicious emails purporting to be legitimate from such entities as Western Union, Norton AntiVirus and the IRS to spread the malware. Pierluigi Paganini.

Cryptocurrency 89

Cryptocurrency Identity Theft Advertising Accountability 89

Security Affairs

APRIL 17, 2019

A new variant of the HawkEye data stealer emerges in the threat landscape as part of ongoing malware distribution campaigns. New malware campaigns leveraging a new variant of the HawkEye data stealer have been observed by experts at Talos. has been under active development since at least 2013. ” continues the analysis. .

Antivirus 83

Antivirus Malware Advertising Passwords 83

Security Affairs

NOVEMBER 4, 2018

Researchers from Recorded Future’s Insikt Group and McAfee’s Advanced Threat Research team have discovered a new version of the malware that is offered through a RaaS distribution program on the Dark Web. With this partnership, Kraken now has an additional malware delivery method for its criminal customers.” The new Kraken v.2

Ransomware 95

Ransomware Advertising Cybercrime Malware 95

The Last Watchdog

JUNE 21, 2020

Balaban This ransomware was doing the rounds over spam generated by the Gameover ZeuS botnet, which had been originally launched in 2011 as a toolkit for stealing victim’s banking credentials and was repurposed for malware propagation. Forward outlook Ransomware is a dynamic and increasingly hybrid segment of cybercrime.

Ransomware 243

Ransomware Hacking Encryption Penetration Testing 243

Security Affairs

APRIL 27, 2020

The cybercrime gang also apologized for the damages they have caused their victims. Shade was considered one of the most dangerous threats in the cyber crime scenario, it has been active at least since 2014 when a massive infection was observed in Russian. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Ransomware 119

Ransomware Advertising Antivirus Education 119

SecureWorld News

JANUARY 28, 2021

This is a unique and new approach to effectively disrupt the activities of the facilitators of cybercrime.". EMOTET gained notoriety for being one of the most professional and longest lasting cybercrime services to exist. Europol also stresses that EMOTET was so much more than just malware. EMOTET's history and effectiveness.

Cybercrime 52

Cybercrime Malware Antivirus Banking 52

Security Affairs

JUNE 12, 2019

FireEye documented obfuscation techniques used by the group in June 2017 and the involvement of PUNCHTRACK POS-scraping malware. The ShellTea backdoor was analyzed by researchers Root9b in June 2017, the malware was used by threat actors to deliver the PoC malware. ” reads the analysis published by Morphisec.

Hacking 76

Hacking Malware Advertising Retail 76

Krebs on Security

JULY 28, 2022

” Microleaves has long been classified by antivirus companies as adware or as a “potentially unwanted program” (PUP), the euphemism that antivirus companies use to describe executable files that get installed with ambiguous consent at best, and are often part of a bundle of software tied to some “free” download.

Advertising 216

Advertising Software Computers and Electronics Internet 216

Security Affairs

DECEMBER 7, 2019

US DoJ charged two Russian citizens for deploying the Dridex malware and for their involvement in international bank fraud and computer hacking schemes. The Bugat malware a multifunction malware package designed to automate the theft of confidential personal and financial information. Attorney Brady.

Banking 65

Banking Malware Cybercrime Accountability 65

Security Affairs

SEPTEMBER 16, 2019

The experts discovered that digital certificates are then used to spread malware, mainly adware. Threat actors sign their malware with legitimate digital certificates to avoid detection. The researchers provided evidence that the threat actors sold the purchased certificates to a cybercrime gang that used them to spread malware.

Adware 80

Adware Advertising Marketing Antivirus 80

Security Affairs

NOVEMBER 11, 2021

0)b31 router distributed by TrueOnline CVE-2014-2321 ZTE F460 and F660 cable modems CVE-2017-6334 NETGEAR DGN2200 devices with firmware through 10.0.0.50. BotenaGo was written in Golang (Go) and at the time of the report published by the experts, it had a low antivirus (AV) detection rate (6/62). v001 / 3.40(ULM.0)b31

IoT 122

IoT Firmware Malware Wireless 122

Security Affairs

JANUARY 26, 2020

Malware attack took down 600 computers at Volusia County Public Library. Chinese hackers exploited a Trend Micro antivirus zero-day used in Mitsubishi Electric hack. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Data breaches 80

Data breaches Advertising Antivirus DDOS 80

Security Affairs

MARCH 19, 2020

” According to the experts, the first infections were observed in late 2019, victims reported their files were encrypted by a strain of malware. Operators behind the Pysa ransomware, also employed a version of the PowerShell Empire penetration-testing tool, they were able to stop antivirus products. Pierluigi Paganini.

Government 105

Government Ransomware Encryption Penetration Testing 105

Security Affairs

APRIL 21, 2019

Analyzing OilRigs malware that uses DNS Tunneling. Operator of Codeshop Cybercrime Marketplace Sentenced to 90 months in prison. Avast, Avira, Sophos and other antivirus solutions show problems after. Marcus Hutchins pleads guilty to two counts of banking malware creation. Pierluigi Paganini.

Computers and Electronics 61

Computers and Electronics Spyware Data breaches Advertising 61

Security Affairs

NOVEMBER 19, 2019

To bypass antivirus systems, hackers send out malicious emails in non-working hours with delayed activation. The first half of 2019 saw a 10-fold increase in the number of password-protected objects, such as documents and archive files, being used to deliver malware. Another trend was disguising malware in emails.

Ransomware 70

Ransomware Antivirus Malware Banking 70

Security Affairs

FEBRUARY 17, 2019

New Linux coin miner kills competing malware to maximize profits. Experts found a way to create a super-malware implanted in SGX-enclaves. Experts spotted a new strain of Shlayer macOS Malware. Astaroth Trojan relies on legitimate os and antivirus processes to steal data. Gootkit: Unveiling the Hidden Link with AZORult.

Advertising 69

Advertising Antivirus Malware Backups 69

Security Affairs

AUGUST 28, 2019

The French police force, National Gendarmerie, announced to have neutralized the Retadup malware on over 850,000 computers taking over its C2 server. The operation allowed the France law enforcement agency to remotely disinfect more than 850,000 computers worldwide with the help of Avast malware researchers. ” continues Avast.

Malware 84

Malware Advertising Antivirus Cryptocurrency 84

Security Affairs

DECEMBER 1, 2020

Since at least 2014, experts at FireEye have observed APT32 targeting foreign corporations with an interest in Vietnam’s manufacturing, consumer products, and hospitality sectors. The experts warn that nation-state actors are adopting TTPs associated with cybercrime gangs to make it hard the attack attribution. ” Microsoft said.

Cryptocurrency 95

Cryptocurrency Antivirus Manufacturing Government 95

Security Affairs

MARCH 26, 2019

Malware researchers at Cybaze-Yoroi ZLab team uncovered a new Ursnif malware campaign that reached several organizations across Italy. The Ursnif trojan confirms itself as one of the most active malware threats in cyberspace, even during the past days, when new attack attempts reached several organizations across Italy.

Malware 85

Malware Antivirus Advertising Encryption 85

Security Affairs

OCTOBER 12, 2019

In August 2018, three members of the notorious cybercrime gang have been indicted and charged with 26 felony counts of conspiracy, wire fraud, computer hacking, access device fraud and aggravated identity theft. ” ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. ” reads the Mandiant report.

Identity Theft 75

Identity Theft Hacking Advertising DNS 75

Security Affairs

JULY 19, 2019

He is suspected of large-scale production and selling of malware.” “The young man offered programs with names like Rubella, Cetan and Dryad, enabling the buyer to include secret code or malware in amongst others Word or Excel files.” Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Malware 69

Malware Social Engineering Advertising Antivirus 69

Security Affairs

JULY 27, 2018

“ CoinVault ransomware was first spotted in the wild in May 2014, it infected more than 14,000 Windows computers worldwide, most of them in the Netherlands, the US, the UK, Germany, and France. In order to protect your computer from malware: Ensure your system software and antivirus definitions are up-to-date.

Ransomware 44

Ransomware Advertising Antivirus Cybercrime 44

SecureList

JUNE 2, 2022

In their initial disclosures on this threat actor, TeamT5 identified three malware families: SpyDealer, Demsty and WinDealer. In 2020, we discovered a whole new distribution method for the WinDealer malware that leverages the automatic update mechanism of select legitimate applications. WinDealer is a modular malware platform.

Malware 112

Malware Encryption Social Engineering Telecommunications 112

Security Affairs

AUGUST 24, 2020

For instance, to disable built-in antivirus software, the attackers used Defender Control and Your Uninstaller. Group-IB’s technological leadership is built on the company’s 17 years of hands-on experience in cybercrime investigations around the world and 60 000 hours of cyber security incident response accumulated in one of ???

Threat Detection 85

Threat Detection Ransomware Advertising Cybercrime 85

Security Affairs

APRIL 10, 2019

SI-LAB detected hundreds of users that were impacted by this malware between March 18th and 26th of 2019. The last days of March 2019 are making headlines due to a targeted cyber attack involving a new variant of infamous EMOTET malware. With that, criminals achieved an important rule of thumb in the malware landscape: no detection.

Banking 59

Banking Malware Antivirus Cyber threats 59

Security Affairs

SEPTEMBER 10, 2018

Once deployed on a compromised website, the exploit kit leverages the CVE-2018-4878 Adobe Flash Player and the CVE-2018-8174 Windows VBScript engine vulnerabilities to deliver a malware on the visitors’ machines. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Advertising 44

Advertising Ransomware Antivirus Malware 44

Security Affairs

JULY 30, 2018

Malware researchers at Proofpoint spotted a new version of the AZORult Spyware in the wild, it was involved in a large email campaign on July 18, just 24 hours it appeared in cybercrime forums on the Dark Web. ” Experts noticed that the infection process requests a significant users’ interaction to avoid antivirus.

Spyware 47

Spyware Cryptocurrency Passwords Malware 47